Privacy Policy

1) Introduction

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to personally identify you.

1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is allSMT GmbH & Co. KG, Am Windrad 1b, 52156 Monschau, Deutschland, Tel.: 024729127040, E-Mail: info@allSMT.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the page server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & content delivery network

We use a provider to host our website and display the page content. This provider provides its services itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded an order processing contract with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

We use cookies, i.e. small text files that are stored on your end device, to make visiting our website more attractive and to enable the use of certain functions. Some of these cookies are automatically deleted again after closing the browser (so-called “session cookies”), while some of these cookies remain on your end device for longer and enable the storage of page settings (so-called “persistent cookies”). In the latter case, you can see the storage period in the overview of cookie settings for your web browser.

If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 (1) point b GDPR, for the performance of the contract, in accordance with Art. 6 (1) point f GDPR, for the purpose of our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Tawk.to

This website uses a live chat system from the following provider: tawk.to inc. 187 East Warm Springs Rd, SB298 Las Vegas, NV, 89119, USA

Personal data transmitted via the chat is processed either in accordance with Art. 6 (1) point b GDPR, because it is necessary for the initiation or execution of a contract, or in accordance with Art. 6 (1) point f GDPR, because of our legitimate interest in the effective support of our site visitors.

Your data transmitted in this way will be deleted, subject to any legal retention obligations, once the matter in question has been conclusively clarified.

In addition, further information may be collected and evaluated using cookies for the purpose of creating pseudonymized user profiles. However, this information is not used to identify you personally and is not merged with other data sets. Insofar as this information is personally identifiable, it is processed in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by appropriate browser settings. However, in this case the functionality of our website may be restricted. You can object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

5.2 When you contact us (e.g. using the contact form or by email), personal data is processed solely for the purpose of processing and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) of the GDPR. If you contact us with a view to entering into a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided that there are no legal storage obligations to the contrary.

6) Data processing when opening a customer account

In accordance with Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The input mask on our website indicates which data is required for opening an account.

You can delete your customer account at any time by sending a message to the above address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, there are no legal retention periods to the contrary and there is no legitimate interest on our part in further storage.

7) Use of customer data for direct mail

7.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only information required to receive the newsletter is your e-mail address. The provision of further data is voluntary and is used to enable us to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) point a GDPR. In doing so, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named at the beginning. After you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use the data in a manner that goes beyond the scope permitted by law and about which we inform you in this statement.

7.2 SMS marketing

On our website, you have the option to register to receive SMS notifications about current offers, promotions and information about orders placed.

The only information required for sending SMS notifications is your mobile phone number. The provision of any further information is voluntary and is used to address you personally.

The so-called double opt-in procedure is used for sending SMS messages, which ensures that advertising SMS messages are only sent to you once you have expressly confirmed to us that you consent to receiving the SMS by clicking on a verification link sent to the specified mobile phone number.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) point a GDPR. When registering to receive SMS messages, the date and time of registration are also stored in order to be able to trace any possible misuse of your mobile phone number at a later point in time. The data collected during registration is used exclusively for the purpose of sending advertising by means of SMS messages.

You can unsubscribe from the SMS service at any time by sending a message to the controller named above, thereby revoking your consent with effect for the future. After you have unsubscribed, your mobile phone number will be deleted from the distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use the data for other purposes that are permitted by law and about which we inform you in this statement.

8) Data processing for order fulfillment

8.1 Insofar as it is necessary for the fulfillment of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) point b GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided when placing your order (name, address, email address) in order to personally inform you of upcoming updates within the legally prescribed period and in accordance with our legal information obligations pursuant to Art. 6 (1) (c) GDPR, we will use the contact information you provided when placing your order (name, address, email address) to personally inform you of upcoming updates within the legally prescribed period and via a suitable means of communication (e.g. by post or email). Your contact information will be used strictly for the purpose of communicating updates we are required to provide and will be processed by us only to the extent necessary for the respective information.

In order to process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Disclosure of personal data to shipping service providers

– Deutsche Post

As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a delivery notice, if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to the supplier for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the supplier or the delivery notification is not possible.

The consent can be withdrawn at any time with effect for the future by contacting the controller or the provider.

– DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a delivery announcement, if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to the provider for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The passing on only takes place if it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the controller or the provider.

– DHL Express

As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

We will forward your e-mail address and/or telephone number to the supplier in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a delivery notice, if you have given your express consent during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The passing on only takes place if this is necessary for the delivery of goods. In this case, prior agreement of the delivery date with the provider or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the controller or the provider.

FedEx

As a transport service provider, we use the following provider: FedEx Express Germany GmbH, Langer Kornweg 34 k,65451 Kelsterbach, Germany

We will forward your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a delivery notice, if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to the provider for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The passing on only takes place if this is necessary for the delivery of goods. In this case, prior agreement of the delivery date with the provider or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the controller or the provider.

– Hermes

As a transport service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a delivery notice, if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to the provider for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if this is necessary for the delivery of goods. In this case, prior agreement of the delivery date with the provider or delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the controller or the provider.

– Shipper

As a transport service provider, we use the following provider: Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a delivery notice, if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to the provider for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The passing on only takes place if it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the controller or the provider.

– TNT

As a transport service provider, we use the following provider: TNT Express GmbH, Haberstraße 2, 53842 Troisdorf, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) a DSGVO, provided that you have given your express consent during the ordering process, before the goods are delivered, for the purpose of coordinating a delivery date or to notify you of the delivery. Otherwise, only the name of the recipient and the delivery address will be passed on to the provider for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The passing on only takes place if it is necessary for the delivery of goods. In this case, prior agreement of the delivery date with the provider or the delivery announcement is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the controller or the provider.

– UPS

As a transport service provider, we use the following provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

We will forward your e-mail address and/or telephone number to the supplier in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a delivery notice, if you have given your express consent during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The passing on only takes place if this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible.

The consent can be withdrawn at any time with effect for the future by contacting the controller or the provider.

8.3 Use of payment service providers (payment services)

– Paypal

This website accepts one or more online payments from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider that requires you to pay in advance, your payment data (including name, address, bank and payment card information, currency and transaction number) provided during the ordering process, as well as information about the content of your order, will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will be passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary.

If you select a payment method in which we make advance payment, you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, and, if applicable, data on an alternative means of payment) during the order process.

In order to protect our legitimate interest in determining your solvency in such cases, we will forward this data to the provider in accordance with Art. 6 (1) point f GDPR for the purpose of a credit check. On the basis of the personal data you have provided, as well as other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.

You can object to this processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

– SumUp

One or more online payment methods from the following provider are available on this website: SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland D02 K580

If you select a payment method from the provider that requires you to pay in advance (such as a credit card payment), your payment data (including name, address, bank and payment card information, currency and transaction number) provided during the ordering process, as well as information about the content of your order, will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will be passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

9) Web analysis services

9.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google (Universal) Analytics sets cookies, which are stored as small text files on your device and collect certain information. This information also includes your IP address, which is, however, shortened by Google by the last digits in order to exclude a direct personal reference.

The information is transferred to Google servers and processed there. In this context, transmissions to Google LLC based in the USA are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services relating to website and internet use. The abbreviated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected in the context of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All the processing described above, in particular the setting of cookies on the end device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites.

Demographic characteristics

Google (Universal) Analytics uses the special function “demographic characteristics” and can use it to create statistics that provide information about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for a period of two months.

Google Signals

As an extension to Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) point a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can disable the “Personalized Advertising” feature in your Google Account settings. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information about Google Signals, see the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google (Universal) Analytics, the “UserIDs” function can be used on this website. If you have set up an account on this website and consent to the use of Google (Universal) Analytics in accordance with Art. 6 (1) point a GDPR, your activities, including conversions, can be analyzed across devices if you use different devices.

For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

9.2 Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are stored as small text files on your device and collect certain information. This information includes your IP address, which is truncated by Google by the last digits in order to exclude a direct personal reference.

The information is transmitted to and processed by Google servers. In this context, transmissions to Google LLC based in the United States are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The abbreviated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for a period of two months and then deleted.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the “Cookie-Consent-Tool” provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites.

Demographic characteristics

Google Analytics 4 uses the special function “demographic characteristics” and can use it to create statistics that provide information about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for a period of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) point a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can disable the “Personalized Advertising” feature in your Google Account settings. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de.

UserIDs

As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) point a GDPR, set up an account on this website and log in to this account on various devices, your activities, including conversions, can be analyzed across devices.

9.3 Google Tag Manager

This website uses “Google Tag Manager”, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and attaching conditions to them via a uniform user interface. Google Tag Manager itself does not store any information on user terminals or read it out. Nor does the service perform any independent data analysis. However, when you visit a page, Google Tag Manager transmits your IP address to Google, where it may be stored. It is also possible to transmit the data to Google LLC. servers in the United States.

This processing will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, Google Tag Manager will not be used when you visit our site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de.

10) Retargeting/Remarketing and Conversion Tracking

releva.nz

This website uses retargeting technology from the following provider: releva GmbH, Feilnerstr. 10, 10969 Berlin, Germany

This enables us to address visitors to our website who have already shown an interest in our shop and our products with personalized, interest-based advertising. The advertising material is displayed on the basis of a cookie-based analysis of past and current usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus to customize the advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device. This way, you are shown advertising that most likely matches your product and information interests.

All the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the “Cookie-Consent-Tool” provided on the website.

11) Site functionalities

11.1 Vimeo

This website uses plugins to display and play videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.

If embedded videos are played via the plugin, the provider also uses cookies to collect information about user behavior, generate playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider while visiting the site, your data will be directly associated with your account when you click on a video. If you do not want the data to be associated with your account, you must log out before clicking the play button.

All of the aforementioned processing, in particular the setting of cookies for reading information on the end device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the “Cookie Consent Tool” provided on the website.

For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

11.2 Google Web Fonts

This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data in the course of establishing a connection with the font provider will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service using the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.3 Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA. The provider uses “Google Fonts”, i.e. fonts loaded from the internet by Google, for the visual design of the captcha window. No information other than that mentioned above, which is already transmitted to Google via the ReCaptcha functionality, is processed.

The service checks whether an entry is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is taken by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this to the provider’s server for evaluation.

The legal basis for this is our legitimate interest in determining individual responsibility on the internet and avoiding misuse and spam in accordance with Art. 6 (1) point f GDPR.

We have concluded an order processing contract with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.4 Google Meet

We use this provider for online meetings, video conferences and/or webinars: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

This may also result in a transfer to the servers of Google LLC. in the USA.

The provider processes different data, whereby the scope of the processed data depends on which data you provide before or during participation in an online meeting, a video conference or a webinar. Your data will be processed as a communication participant and stored on the provider’s servers. This may include, in particular, your registration data (name, e-mail address, telephone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and sound contributions from participants as well as voice input in chats can be processed.

Art. 6 (1) lit. b GDPR serves as the legal basis for the processing of personal data necessary for the performance of a contract to which you are party (this also applies to processing operations necessary for the performance of pre-contractual measures). Insofar as you have given us consent to the processing of your data, the processing is carried out on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future.

In addition, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in accordance with Art. 6 Para. 1 lit. f DSGVO in the effective execution of the online meeting, webinar or video conference.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.5 GoToMeeting

We use this provider for online meetings, video conferences and/or webinars: LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland

This may also result in transmission to GoToMeeting servers in the United States.

The provider processes various data, with the scope of the processed data depending on what data you share before or during participation in an online meeting, video conference or webinar. Your data is processed as a communication participant and stored on the provider’s servers. This may include, in particular, your registration data (name, e-mail address, telephone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and sound contributions from participants as well as voice input in chats can be processed.

In addition, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in accordance with Art. 6 (1) point f GDPR in the effective execution of the online meeting, webinar or video conference.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11.6 Microsoft Teams

We use this provider for online meetings, video conferences and/or webinars: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

In addition, image and sound contributions from participants as well as voice input in chats can be processed.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

11.7 TeamViewer

We use this provider for online meetings, video conferences and/or webinars: TeamViewer Germany GmbH, Bahnhofsplatz 2, 73033 Göppingen

The provider processes various data, whereby the scope of the processed data depends on which data you provide before or during participation in an online meeting, a video conference or a webinar. Your data will be processed as a communication participant and stored on the provider’s servers. This may include, in particular, your registration data (name, e-mail address, telephone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and sound contributions of the participants as well as voice input in chats can be processed.

In addition, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in the effective execution of the online meeting, webinar or video conference in accordance with Art. 6 (1) point f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

11.8 Zoom

We use this provider to conduct online meetings, video conferences and/or webinars: Zoom Video Communications Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA

The provider processes different types of data, with the scope of the processed data depending on which data you provide before or during participation in an online meeting, a video conference or a webinar. Your data will be processed as a communication participant and stored on the provider’s servers. This may include, in particular, your registration data (name, e-mail address, telephone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and sound contributions from participants as well as voice input in chats can be processed.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

11.9 Applications for job vacancies by email

We advertise current vacancies on our website in a separate section, for which interested parties can apply by emailing the provided contact address.

Applicants must provide all personal data necessary for a well-founded assessment, including general information such as name, address and contact details, as well as performance-related evidence and, if applicable, health-related information. Details of the application can be found in the job advertisement.

After receipt of the application by e-mail, the data will be stored and evaluated exclusively for the purpose of processing the application. If we have any questions, we will either use the applicant’s e-mail address or telephone number. The processing is carried out on the basis of Art. 6 (1) point b GDPR (or Art. 26 (1) Federal Data Protection Act (BDSG)), in which the completion of the application procedure is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) point b. DSGVO, so that we can exercise the rights arising from labor law and the law of social security and social protection and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) of the GDPR if it is carried out for the purposes of preventive or occupational medicine, for the assessment of the applicant’s ability to work, for medical diagnosis, for the provision of care or treatment in the health or social field or for the management of health or social care systems and services.

If the applicant is not selected or if an applicant withdraws his application prematurely, the data submitted by him/her and all electronic correspondence, including the application email, will be deleted after a corresponding notification at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, in being able to comply with our obligations to provide evidence under the regulations for the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 (1) point b GDPR (for processing in Germany in conjunction with Section 26 (1) of the German Federal Data Protection Act (BDSG)) for the purpose of implementing the employment relationship.

11.10 Online applications using a form

We advertise current vacancies in a separate section of our website, where interested parties can apply using a corresponding form.

Applicants must provide all personal data required for a well-founded assessment, including general information such as name, address and contact details, as well as performance-related evidence and, if applicable, health-related information. Details of the application can be found in the job advertisement.

When the form is sent, the applicant data is encrypted using state-of-the-art technology and transmitted to us, stored by us and evaluated exclusively for the purpose of processing the application. The processing is carried out on the basis of Art. 6 (1) point b GDPR (or Art. 26 (1) Federal Data Protection Act (BDSG)), in which the completion of the application process is considered to be the initiation of an employment contract.

If the applicant is not selected or if an applicant withdraws his application prematurely, his data submitted on forms as well as all electronic correspondence including the application mail will be deleted after a corresponding notification at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, to be able to comply with our obligations to provide evidence under the regulations for the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 (1) point b GDPR (in the case of processing in Germany in conjunction with Section 26 (1) of the German Federal Data Protection Act (BDSG)) for the purpose of implementing the employment relationship.

12) Tools and miscellaneous

12.1 – DATEV

We use the cloud-based accounting software service of the following provider for our accounting: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

The provider processes incoming and outgoing invoices as well as, if applicable, our company’s bank transactions in order to automatically record invoices, match them to the transactions and use them to create the financial accounting in a partially automated process.

Insofar as personal data is also processed in this context, the processing is carried out on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

12.2 Cookie consent tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they visit the site in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate boxes. When the tool is used, all cookies/services requiring consent are only loaded if the respective user gives their consent by ticking the appropriate box. This ensures that such cookies are only set on the user’s device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this process.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in a legally compliant design of our website.

Another legal basis for the processing is also Article 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded an order processing contract with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options for the cookie consent tool can be found directly in the corresponding user interface on our website.

13) Rights of the data subject

13.1 The applicable data protection law grants you the following rights (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, whereby reference is made to the cited legal basis for the respective conditions of exercise:

Right of access according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to erasure according to Art. 17 GDPR;
Right to restriction of processing according to Art. 18 GDPR;
Right to notification according to Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to revoke consent granted in accordance with Art. 7 (3) GDPR;
Right to lodge a complaint in accordance with Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO FILE AN OBJECTION TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of the processing and, if relevant, additionally on the basis of the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 (1) point a GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed in the context of legal or similar obligations on the basis of Art. 6 para. 1 lit. b DSGVO are processed, these data are routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfillment or initiation of the contract and/or there is no longer any legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right of objection under Art. 21 para. 1 GDPR, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until you exercise your right of objection under Art. 21 (2) GDPR.

Unless otherwise provided in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary in relation to the purposes for which they were collected or otherwise processed.